Categories:: System functions (System Information)

SYSTEM$GET_CMK_AKV_CONSENT_URL¶

Returns a consent URL to the Azure Key Vault account related to customer-managed keys.

You can use the consent URL for your customer-managed keys with Tri-Secret Secure for Snowflake accounts on Microsoft Azure.

See also:: Customer-managed keys

Syntax¶

SYSTEM$GET_CMK_AKV_CONSENT_URL( '<account_identifier>' , '<tenant_id>' )

Copy

Arguments¶

'account_identifier'

Specifies the account identifier for your Snowflake account on Azure.

Required.

'tenant_id'

Specifies the unique identifier for the tenant in your Azure subscription. This value is in the GUID/UUID format, such as b3ddabe4-e5ed-4e71-8827-0cefb99af240.

Required.

To locate this value, follow the instructions in How to find your Azure Active Directory tenant ID.

Usage notes¶

This function is for use in Snowflake accounts on Microsoft Azure only.
Only account administrators (i.e. users with the ACCOUNTADMIN role) or a role that is granted the global MONITOR SECURITY privilege can call this function.

Examples¶

Return the consent URL to the Azure Key Vault account related to customer-managed keys, where my-account is the Snowflake account identifier in the account name format for your Snowflake account on Azure and b3ddabe4-e5ed-4e71-8827-0cefb99af240 is the tenant identifier for your Azure subscription:

SELECT SYSTEM$GET_CMK_AKV_CONSENT_URL('my-account' , 'b3ddabe4-e5ed-4e71-8827-0cefb99af240');

Copy

Returns:

https://login.microsoftonline.com/tenantId/oauth2/authorize?client_id=myClientId&response_type=code